DV SSL/TLS Certificate for www.rafilm.ru

Certificate is witin its validity period

Issued by GlobalSign nv-sa (GlobalSign GCC R6 AlphaSSL CA 2023)

About the www.rafilm.ru DV SSL/TLS Certificate

This certificate with serial number 75:cc:1d:32:c6:1a:ba:cc:d2:c4:e4:e8 for www.rafilm.ru was issued on by GlobalSign nv-sa.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.rafilm.ru provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 75:cc:1d:32:c6:1a:ba:cc:d2:c4:e4:e8
Serial Number (int): 36456504901538891655404643560
Serial Number Length: 95 bits, 12 octets

Subject Key Identifier: c2:36:f4:df:56:7d:9f:22:d9:73:30:55:1b:22:83:1c:43:1b:c9:c4
Authority Key Identifier: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74

Fingerprint (SHA-1): aa:22:4f:ab:a0:b4:ad:b4:81:8a:35:be:1b:49:58:25:f4:26:c2:af
Fingerprint (SHA-256): b5:d4:02:34:87:7d:93:a2:fc:12:53:27:03:d0:6a:0b:de:75:b9:36:ba:7b:5e:da:86:b3:56:cc:64:27:90:ce

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt

Revocation Information

OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023
CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl

Check the revocation status for certificate www.rafilm.ru
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.rafilm.ru

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.rafilm.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36456504901538891655404643560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 12:24:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-26 12:24:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rafilm.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837913895111828364237519695297929133116451477608401034049949067971856308633862914380970038265988994747070318545529845689076289043575618322225074610067945882958612313454982223943368726490421785306461414597983631437810110767328720937328044951861252507147362217469161327114712431430597473890352025739689572086901342009649971619052053996903832117063992346613693650453753689790491228829145602881665179436864223316693711326460138300461685968046288238828806355680194882481668307247397510472358367009592731617963653398316203133698921466179738863918191302988822455837833072055010128426570845546247807310052074711009917191712980735247872792641932279490480334773842494051730504030131189572240172307475895913484686360230658627824233074608477765033604941772416859885212197969708271089620315952496927238259257502042375882654398901887777013012308624014021093332787202961067604677396141525130619581753672487577074597192084361353240866996454770252698852592360244542678591940590525919810527410372949682727443355839021918430803064086145867404642538957573771176547092715809284016685875975718153154432312134547277740090928825923033875466930788897736374753198632059203381941089000809084522320113570720715904273236618869532718504537691785041130128747574361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rafilm.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rafilm.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c236f4df567d9f22d97330551b22831c431bc9c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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